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Abstract —In this paper, we investigate secure and reliable 
transmission strategies for multi-cell multi-user massive multiple- 
input multiple-output (MIMO) systems in the presence of an 
active eavesdropper. We consider a time-division duplex system 
where uplink training is required and an active eavesdropper 
can attack the training phase to cause pilot contamination at 
the transmitter. This forces the precoder used in the subsequent 
downlink transmission phase to implicitly beamform towards 
the eavesdropper, thus Increasing its received signal power. We 
derive an asymptotic achievable secrecy rate for matched filter 
precoding and artificial noise (AN) generation at the transmitter 
when the number of transmit antennas goes to infinity. For 
the achlevabllity scheme at hand, we obtain the optimal power 
allocation policy for the transmit signal and the AN in closed 
form. For the case of correlated fading channels, we show 
that the Impact of the active eavesdropper can be completely 
removed if the transmit correlation matrices of the users and the 
eavesdropper are orthogonal. Inspired by this result, we propose 
a precoder null space design exploiting the low rank property 
of the transmit correlation matrices of massive MIMO channels, 
which can significantly degrade the eavesdropping capabilities of 
the active eavesdropper. 

I. Introduction 

Physical layer security has attracted significant research 
interest recently. In Wyner’s pioneering work on information- 
theoretic security, a “wiretap channel” model was defined and 
the associated secrecy capacity was obtained [1]. More recent 
studies have investigated the capacity and the precoder design 
for multiple antenna wiretap channels [ 2 - 4 ]. When the channel 
state information (CSI) of the eavesdropper is imperfectly 
known at the transmitter, artificial noise (AN) can be generated 
and transmitted along with the information-bearing signal to 
interfere the decoding process of the eavesdropper [5]. 

Most studies on physical layer security assume that perfect 
CSI of the legitimate channel is available at the transmitter 
and do not consider the channel training phase in acquiring the 
CSI. However, in time-division duplex (TDD) communication 
systems, the base station (BS) needs to estimate the channel 
for the subsequent downlink transmission based on the pilot 
sequences sent by the users in the uplink training phase. As a 
result, a smart eavesdropper might actively attack this channel 
training phase by sending the same pilot sequences as the users 
to cause pilot contamination at the transmitter. In this case, the 
eavesdropping capability can be improved significantly [6]. 

The emergence of smart mobile devices such as smart 
phones and wireless modems has led to an exponentially 
increasing demand for wireless data services. A recent and 
promising solution to meet this demand is massive multiple- 
input multiple-output (MIMO) technology, which utilizes a 
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very large number of antennas at the BS with simple signal 
processing to serve a comparatively small (compared to the 
number of antennas) number of users. The field of massive 
MIMO communication systems was initiated by the pioneering 
work in [7] which considered multi-cell multi-user TDD 
communication. The key idea in [7] is that as the number of 
transmit antennas increases, due to the law of large numbers, 
the effects of uncorrelated receiver noise and fast fading 
vanish. Then, the only residual interference is caused by the 
reuse of the pilot sequences in other cells, which is known as 
pilot contamination. Since the publication of [7], many aspects 
of massive MIMO systems have been investigated [8-11]. 

Physical layer security for massive MIMO systems with 
passive eavesdroppers and imperfect CSI has been recently 
considered in [12]. Secure massive MIMO transmission for 
multi-cell multi-user systems has been investigated in [13], 
where a passive eavesdropper attempts to decode the infor¬ 
mation sent to one of the users. It was assumed in [12, 
13] that the channel gains of both the desired receiver and 
the eavesdropper are independent and identically distributed 
(i.i.d.). The detection of the existence of an active eavesdropper 
in massive MIMO systems was investigated in [14] for i.i.d. 
fading channels. However, a systematic approach to combat 
the pilot contamination attack from the active eavesdropper 
and maintain secrecy of communication for general fading 
channels was not provided in [14] and has not been studied 
in the literature, yet. 

In this paper, we study secure transmission for TDD multi¬ 
cell multi-user massive MIMO systems in the presence of an 
active eavesdropper over general fading channels. We assume 
that in the uplink training phase, the active eavesdropper sends 
the same pilot sequence as the desired receiver to impair the 
channel estimation at the transmitter. Therefore, pilot contam¬ 
ination occurs at the transmitter. Then, the transmitter uses 
the estimated channel to compute the precoder for downlink 
transmission. 

This paper makes the following key contributions: 

1) We derive a closed-form expression for the asymptotic 
achievable secrecy rate with matched filter precoding 
and AN generation at the transmitter assuming the 
number of transmit antennas tends to infinity. 

2) Based on the derived asymptotic expression, we obtain 
the optimal power allocation policy for the information 
signal and the AN in closed form. Moreover, for the 
special case of point-to-point transmission over i.i.d. 
fading channels [6], we prove that the power allocated 
to the transmit signal should be less than a threshold in 
order to ensure reliable secure transmission. 

3) For the case of correlated fading channels, we reveal 
that the impact of the active eavesdropper will vanish 
when the signal space (i.e., the span of the channel 
correlation matrix eigenvectors corresponding to non¬ 
zero eigenvalues) of the users and the eavesdropper are 
mutually orthogonal. 

4) We exploit the low rank property of the transmit cor- 


relation matrices of massive MIMO channels [9,10] to 
design an efficient precoding scheme that transmits in 
the null space of the transmit correlation matrix of the 
eavesdropper. 

Notation: Vectors are denoted by lower-case bold-face let¬ 
ters; matrices are denoted by upper-case bold-face letters. 
Superscripts (•)^, (•)*, and (•)^ stand for the matrix transpose, 
conjugate, and conjugate-transpose operations, respectively. 
We use tr(A) and to denote the trace operation and the 
inverse of matrix A, respectively. || • || and | ■ | denote the 
Euclidean norm of a matrix/vector and a scalar, respectively, 
diag {b} denotes a diagonal matrix. The main diagonal of 
diag {bj contains the elements of vector b. vec (A) stacks 
all columns of matrix A into a vector. The M x M identity 
matrix is denoted by 1m, and the all-zero matrix is denoted 
by 0. The field of complex numbers is denoted by C and 
E [•] denotes statistical expectation. We use x ~ CA/'(0jv,R) 
to denote a circularly symmetric complex Gaussian vector 
X S with zero mean and covariance matrix R. 

stands for max{0,a;}, (8) denotes the Kronecker product, and 

_^OO 

A ^ B means that A almost surely converges to B when 
N goes to infinity. 


II. System Model 

We consider a multi-cell multi-user system with L + 1 cells. 
Each cell contains a BS with Nt antennas and K single¬ 
antenna users. Without loss of generality, let the reference cell 
to be denoted hy I = 0. An active eavesdropper with a single¬ 
antenna' is located in the reference cell, and seeks to recover 
the private message destined to a specific target user m. 

A. Uplink Training and Channel Estimation 

In the uplink training and channel estimation phase, the 
received signal yo at the BS in the reference cell is given 
by [9] 

K L K 

yo=y^,VPok (ujQfc 8 liVt) (u^ik 8 Ijvt) 

k=l i=lfc=l 

-I- VPe (u;om 8 liVt) + n. (1) 

Here, Pik and u)ik G are the average transmit power 

and the pilot sequence of the fcth user in the kh cell, where r 

denotes the length of the pilot sequence, gff. G 

(j^Wtxi denotes the channel between the fcth user in the /th 
cell and the BS in the pth cell, where ^ CAA (O^Tj, IjVt) 
and Ilff, G is the correlation matrix of channel h^^,. 

Pe denotes the average transmit power of the eavesdropper. 

= (R^)^^^g^ denotes the channel between the eaves¬ 
dropper and the BS in the kh cell, where g^ ^ CJV {ONt, IjVt) 
and R^ G is the correlation matrix of channel 

h^. n G is a zero-mean complex Gaussian noise 

vector with covariance matrix NolrNf We assume that the 
same K orthogonal pilot sequences are used for the K 
users in each cell [7], i.e., cuofc = u^ik = = <^k, 

ioflioik = T,ujflujip = 0. Then, the minimum mean square 


*In order to obtain some initial insights regarding massive MIMO systems 
with active eavesdropping, we assume a single-antenna eavesdropper in 
this paper. It is noted that even a single-antenna active eavesdropper is 
an extremely harmful threat to secrecy transmission since it influences the 
precoder used in downlink transmission [6,14]. Considering the conclusion 
in [15, Appendix B], we can also extend our analysis to multiple-antenna 
eavesdroppers. However, the extension to multiple-antenna eavesdroppers 
requires additional pilot sequence design at the eavesdropper and a modified 
precoder design at the transmitter side, which will be investigated in the 
journal version of this paper. 


error (MMSE) estimate of is given by [16] 

UOm — 


v/PomRom +'r ^ TtmRfm + EgRg^^ YOm, (2) 

where 

L 

yom = yPpmrhp^ + V PtmThf^ + y/ PBrh|;-|-(u;m8ljVt)’^n. 

(3) 

Here, hg^ = hg^ -j- Og^, where the estimated channel 
bom (OM) R-Om) the estimation error Bq^ ^ 

CAf Rg^ — Rq„^ are mutually independent. The cor¬ 
relation matrix Rgm given by 

■R 0 _ 

■*^0m 

PomrRom ^ApIjVt +T ^51/ PimRim + PfiR Rom- (4) 

Similarly, the MMSE channel estimates for the mth user 
and the fcth user, k = 1,2, - K,k ^ m, in the hh cell, 
Z = 0,1, • • • , L, are given by 


h;™ — 


VPimRim j AioIjVt-|-r j ^ Ptklltm + PeUI 


L 


yIm - Plm'T'^lTn ^ ^ 

+ VPetIie -f 8 liVt )^n 

and 

h-ik = V PifcRifc (ApiiVt -f T ^ PtkH-lkj yik 


Yim (5) 

( 6 ) 

(7) 


yik = -b ^ V PtmThlk + {ujk 8 I]Vt)^n, (8) 

t=Q,t^l 

respectively. The correlation matrices of and are given 
by 

Rim = Pim^Rim ^ApIjVt + T ^ PtkHtm + PfiR' 

and 

Rife = PlkTll\k ^A^olAft + E ^Pti:Rtfc^ Rife, (10) 
respectively. 


R, 


(9) 


Remark 1: We assume that the correlation matrices of 
the users and the eavesdropper are perfectly known at the 
transmitter, see (2), (5), (7). Eor massive MIMO systems, it is 
reasonable to assume that the statistical CSI of the users of the 
system is known at the BS [9]. Therefore, if the BS attempts 
to transmit a private message to some users and treats other 
users as eavesdroppers, i.e., the eavesdropper is an idle user of 
the system, the correlation matrix of the eavesdropper can also 
assumed to be known. In other cases, the assumption that the 
correlation matrices of the active eavesdropper are available 
at the transmitter may also be reasonable. For example, we 
can obtain E lyimVim] by averaging yim over different data 
slots. Eq. (6) suggests that E [yimyi^] is the sum of the 
correlation matrices of all users and the eavesdropper. Then, 
Pe^e can be obtained by subtracting the correlation matrices 
of the legitimate users and the noise from E [yimyj^] ■ 


B. Downlink Data Transmission 


Next, we consider data transmission. We assume that the 
BSs in all L+1 cells perform jamming to prevent eavesdrop¬ 
ping in their own cell. Then, the transmit signal in the Zth cell 
Z = 0 , 1 , • • ■ , L is given by 

X; = y/P WzfeSjfc + y/gUnull, , (11) 

where P is the average transmit power for downlink 
transmission and sik is the transmit signal for the fcth 
user in the Zth cell with E [|s;fcp] = 1. p and q represent 
the power allocation between the transmit signal and the 
AN with p + q = 1. Due to the high implementation 
complexity of the matrix inversion required for zero forcing 
and MMSE precoding, here we adopt the simple matched 
filter precoding for massive MIMO systems [7,8,13]. Thus, 


we set wik = 


for the Zcth user in the Zth cell. 


Unuii,; ^ CjV (O^j,I tvJ denote the AN shaping 

matrix and the AN vector in the Zth cell, respectively. 


We define H = 


b ^ 


> "ZiV 


To reduce the 


implementation complexity when the number of antennas is 
large, we fix the AN shaping matrix to be the asymptotic 
null space of Hj. Based on [17, Corollary 1], we have 


7(®0 


N, 

Thus, 


H 


Hj^t^oo^diag 


we 


Hjdiag 


Nt 

set 

-1 


Unull, I 
-1 


tr 


,tr(R' 2 ) 


It can be shown that ^tr ( U 


0 


tr ,tr (R' 2 ) ,• • • ,tr (r|^) 

= lAft 

\ Nt 

,1) ■ 


Aull, 




ip^ set Kp + {Nt - K)q = 1. 


To ensure ;^xfx; , 

The received signal at the mth user in the reference cell. 


yom, and at the eavesdropper, j/eve, are given by 

T 

. H 


yOm — 


and 


1=0 

L 


= ^(ho„.jj xi+nom 


i =0 

and Ue 


Xi -I- Ue 


( 12 ) 


(13) 


respectively. Here, nom and rieve are zero-mean Gaussian noise 
processes with variance Nq ^^. We define the signaTto-noise 
ratio (SNR) of the downlink transmission as 7 = P/A^o,d- 


III. Matched Filter Precoding and AN Generation 


An achievable ergodic secrecy rate of massive MIMO 
systems in Section Ilcan be expressed as [13] 

Rsec = [Rom — Ceve]^ (14) 

where i?om and Cevc denote the achievable ergodic rate 
between the BS and the mth user and the ergodic capacity 
between the BS and the eavesdropper, in the 0th cell, respec¬ 
tively. The achievable ergodic rate i?om is given by [13, Eq. 
( 8 )] 

7 ?0m = P [log 2 (1 -f SINRom)] ■ (15) 

where SINRom, is given by 

P7 (hom)'^wo^ 

SINRom = —^- 1 -L (16) 


^=P7 ^ |(hSm)^W 0 fc| 

k = l,k^m ^ 


+97 


L 

xE 

1=1 


E 


(ho^) 


Wife 


+97 E 


(hD"Un,ll ,0 


Unull, I 


+P7 

+ 1 . 

(17) 


To capture the worst case, we assume that the eavesdropper 
has perfect knowledge of its own channel and is able to decode 
and cancel the signals of all intra-cell and inter-cell users from 
the received signal yeve in (13) except for the signal intended 
for the mth user in the 0th cell. In this case, Ceve can be 
expressed as [13, Eq. (7)] 


Ceve = E [l0g2 (1 + SINReve)] 

P7(hB)^W0mW^h^ 


SINReve = 


where 


B 


(18) 

(19) 


B=, 


97(h|;)^Unuii,oU^n^ oh|; + 97E/ (hfi^^Unuii, 

i=i 

( 20 ) 


Now, we are ready to provide an asymptotic achievable 
secrecy rate expression when the number of antennas tends 
to infinity, which is given in the following proposition. 

Proposition 1: An asymptotic achievable secrecy rate for 
matched filter precoding and AN generation for multi-cell 
multi-user massive MIMO systems with an active eavesdrop¬ 
per is given by 

Rsec, asy [logj (1 -T SINRo m, asy ) 

-l0g2(l + SINReve, asy)]+, (21) 

where 

SINRo„^,asy = 377;—- — (22) 


SINRe- 


with 


pj9b,p + q'y 0 b,q + 1 

P 7 (*e,e 

qyde,q + 1 
-1 


(23) 


Om — tr -|- tr tr ^^Ro„^ — Rom^ Rom^ (24) 

L K L - 

= E E tr fRontRjfc) -l-y^trfRL) 


^ = 0 k = l,k^m 
L 


Aom 

(25) 


Gb,q — tr (Rqu^) — tr^Rj^.^ tr ^RqujR^^,^ 

1=0 1 = 0 k = l,k^m 

^ ^ -1 

.1 j I -f r Aotr ^RQ„jCj,n ^ 


1=0 


(26) 


Aom. — T i^Om tr ( C/,ToFt( 


''Im 


+ T Ptmtr f 

+ rV£tr(^RLcLR£(cL) 

Cim = VPiniR^ni I AoIjVt+r I ^PimRim + PfiR' 


h.% 


(Rg™) 


(27) 
•1 

(28) 
(29) 




























6e,q ~ 


Ab = t^Pe 


^ tr(RL) tr (r^R^) 

1=0 1=0 k=l,k^m 

^tr(RL) (30) 

1=0 

tr (cLRb) P + riVotr (k^eCL (cL) 

+ T" -Ptmtr ^RgCj^Rf^ fCiTn) V (31) 


(oife — 0261 ) 


and 

P2 


(32) 


-{aiC2-a2Ci) + \J (aiC2-a2Ci)^-(ai&2 - 0261) (61 - (>2) ci 


(0162 - 0261 ) 

where 

ai = - 7 ^ ((Aft -K)em- {Nt - K) 9i,p - Kdb^q) K9,,q 
&i = 7 {{Nt -K)9^ + {Nt - K) 9t,,p - K9,,,) 

X {'y9e,q +Nt-K) + j (706,, +Nt-K) 

X {{Nt-K)9,,q-K9,,q) 

Cl = ( 7 ^ 6 ,, + Nt-K) {'Y9,,q + Nt-K) 

02 = 7 " {{Nt - K) 06.P - K9i,q) {{Nt - K) 0e,e - K9,,q) 
fe 2 = 7 ( 7 ^ 6 ,, + Aft - A') ((Aft - K) 0e,e - A'ee.,) 

+ 7 ((Aft - K) 9b,p - K9b,q) {y9e,q + Nt - K) 

C2 = ( 7 ^ 6 ,, + Aft - A-) (70e., + Nt-K). 


(33) 

(34) 


(35) 

(36) 

(37) 

(38) 

(39) 


Then, the optimal power allocation p maximizing the 


1, 

if 

Pi f 

0,1 

,P2 i 

0.1] 

arg max Psec, asy (p), 

if 

Pi G 

0.1 

,P2 i 

0 . 1 ] 


P = 


arg max Rsec,asy(p), 
p6{1,P2} 


if pi ^ [0,1] ,P2 G [0,1] , 


with i.i.d. fading, where 

(Afp + r {PoipB + PePe)) {PoiPl - PePI) 


Pth, 1 — 1 + 


Roi/3|7/3b (Afp + tPoiPb) 

PePe {No + rP ePe) 


-• (41) 

PoiPb (Afp + tPoiPb) 

Pth, 1 is a decreasing function of 7 . In the high SNR regime, 
when 7 —> cx), 

7^00 PePe {No + tPePe) 

Pth, 1 — ^ t — a —~— ■ (42) 


Proof: See Appendix A. ■ 

Based on Proposition 1, we can obtain several new insights 
for massive MIMO systems with an active eavesdropper, 
which are summarized in the following corollaries. The proofs 
of these corollaries can be directly obtained by finding feasible 
p which maximize i?sec,asy or yield i?sec.asy > 0 in ( 21 ). 
Corollary 1: Let us define 
Pi = 

— {aiC2—a2Ci) — \J{aiC2 — a2Cif — {aih2 — 0261) (61 — 62)01 


PoiPb {No + tPoiPb) 

Remark 2: We note from (41) that for single-cell single-user 
communication with i.i.d. fading, to enable secure transmis¬ 
sion, the power allocated to the transmit signal has to decrease 
with increasing SNR. In the high SNR regime, as shown in 
(42), if the eavesdropper increases the average transmit power 
Pe in the uplink training phase to make pth, 1 < 0, secure 
transmission cannot be achieved due to the pilot contamination 
attack. In this case, increasing the average transmit power of 
the desired user Pqi in the uplink training phase is essential 
to ensure secure transmission. 

IV. Null Space Transmission Design 

In the following proposition, we investigate the asymptotic 
achievable secrecy rate under a special condition where the 
transmit correlation matrices of the users are orthogonal to 
the transmit correlation matrices of the eavesdropper. 

Proposition 2: If = 0 for ( = 

,L, then the secrecy rate Psec,asy is equivalent to 
the rate without the eavesdropper Psec, asy,orth = log 2 (l + 
SINRqjti , asy, orth) i where 

OTATn P7^m,orth 

ollNxlOm, asy, orth — , /i .1 

PT^feiPjOrth “t“ Q.'y^h,q,OTth. H” I 

with 

0m,orth = tr ( 


(43) 


0 , 


b,p,orth — 


-f 


) (44) 


(45) 


arg max Psec, asy(p), if pi G [0,1] ,P 2 G [0,1] . 

P6{1,P1,P2} 

(40) 

Corollary 2: For Pgec, asy > 0, the power allocated to the 
transmit signal must satisfy^: 

if (ai - 02 ) > 0 ; 

F< if ( 01 - 02 ) < 0. 

For the special case of single-cell single-user communica¬ 
tion {L = 0, K = l,m = 1) with i.i.d. fading (Rq^ = PsT-Nt 
and = Ps^Nt, where Pb and Pe denote the path-loss for 
the desired user and the eavesdropper, respectively. ) [ 6 ], we 
have the following result. 

Corollary 3: p < pth.i has to hold in order to achieve 
secure transmission in single-cell single-user communication 

^When ai — 02 = 0, if 01—02 > 0, then secure transmission can 
be achieved for any p; otherwise, secure transmission can not be achieved 
regardless of the value of p. 


^Rom.orth^ 

-f tr ^Ro7Ti,orth^ tr ^^Rom Rom.orth^ Rom,orth 
L K 

Y, Y tr(RLRk) 

1 = 0 k = l,k^m 
L 

^ ^ tr ^ ort,orth 

1 = 1 

L L K 

^tr(RL)-^ ^ tr(RL) tr (r^RL) 

1=0 1=0 k=l,k^m 

L 

^ ^ ^^m,orth^ 

1=0 

-^0m,orth -Pom | tf 

+ T ^ ^ Ptmtr ^R,0mC im,orth-^£m ^^ir7i,orth^ ^ 


0, 


b,q,orth — 


I 

0m,orth 
2 


(46) 


-L rAotr ( Ro„C 

im,orth orth) ^ 


= VPmRim [ AoIlVt +T ^ PtmR! 


R, 


= Pit 


t=o 

L 


tRL VoIjVt + r ^ PtmRjm R! 


(47) 


(48) 


(49) 


Proof: The proposition can be proved by applying the ma¬ 
trix inversion lemma in (4) and (9), using the fact R^Cg^ = 
0, and performing some matrix transformation operations. Due 
to space limitation, details of the proof are omitted here. ■ 

















Proposition 2 shows that when the channels of the eaves¬ 
dropper and the users are statistically orthogonal, the impact of 
the pilot contamination attack disappears. It is known that for 
many massive MIMO scenarios, the transmit correlation ma¬ 
trices of the channels are low rank [9,10]. As a result, inspired 
by Proposition 2, we propose a null space transmission design 
along the correlation matrix of the eavesdropper’s channel 
as follows. 


In the uplink training phase, we can rewrite (1) as 
Yo = + ^212 + N 

k = l 1 = 1 k = l 

(50) 

where yo = vec(Yo) and n = vec(N). Assume the rank 
of is N. Let us now construct a matrix e 
whose M columns are the M eigenvectors whicn correspond 
to the zero eigenvalues of R^, where M = Nt — N. In the 
uplink training phase, we multiply Yq with to obtain 

(V^)" Yo = (Vs )"" ^ 


k = l 

rO \H 0 T 


and 


X (V^)" N (51) 


y 0 ,null = vec Yoj = (ujfc g) IjVt)hofe,nuil 

k=l 

L K 

+(ujfe (8) livt) h° 


^Zfc.null 


+ V Pe ( ® liVt ) (VS;)'"h|+Hn„U 

Where = {Y%f h?, ^ CM (o, 

(V^)^R 0 ,V^, I = ,L, fc = 1 , 2 , 


(52) 


ro 

^/fe.null 


, K, and 


0 

'tm,null 


y0m,null? (53) 


Hnuii ~ CM {Q,tNq1m)- Then, we estimate as 

'\/-P0mR'0m ,null 1 

where 

L 

y0m,null — y/ -Pom'rhQ^ jjuU -f '22 V PtmTh tm,Ti 

t = l 
V H 


aiqIm “f '^22 


-f V^T (Vb) h.% + 8) lM)^nnull. (54) 


Similarly, we have 


where 


CM(o 


CM (ojMt , 


= hO 

^^ 0 m,null 


^0 

“'0m,null’ 


R O _ TjO 

mill 


iO 


'0m,null 
0 


0m,null 


•dO 

■*^ 0 m,null 

, with 


and 


r; 

_Pom'r R-Om, null 


NqIm + T -PtmRtm,null r! 


(55) 


In the downlink data transmission phase, we employ the 
same transmission scheme as in Section II-B, but replace wom 

with Wom.nuii = and set p = 1/K, q = 0. 

We refer to this transmission design as “Null Space Design”. 
Following the same approach as in Appendix A, we can show 
that the asymptotic achievable secrecy rate of the “Null Sgace 
Design” is still given by (21) after replacing Rom and Rq^ 
with Rom.nuii and Ro,„_„uii in 9m, respectively, and setting 
R^ = 0 in (21). The other terms in (21) remain unchanged. 


Remark 3: The proposed null space design transmits the 
signal along the orthogonal subspace V^. As a result, the 
performance of the null space design depends on the rank 
of Vg. For instance, for the extreme case of i.i.d. fading, 
does not exist and hence the null space design is not 
applicable. In practice, the null space design will perform 
better in highly correlated channels, under strong pilot con¬ 
tamination attack, and in the high SNR regime since it can 
effectively degrade the eavesdropper’s performance in these 
scenarios. Matched filter precoding and AN generation, in 
contrast, will perform better in weakly correlated channels, 
under weak pilot contamination attack, and in the low SNR 
regime. Based on the expression in (21), an analytical criterion 
can be obtained to determine whether matched filter precoding 
with AN generation or the null space design is preferable for 
a given channel and eavesdropper parameters. 


V. Numerical Results 


In this section, we provide numerical results to evaluate 
the secrecy performance of the considered massive MIMO 
system with an active eavesdropper. We consider a system 
where a Nt = 128 uniform linear array is employed at the 
base station, the antenna spacing is half a wavelength, and 
the angle of arrival (AoA) interval is A = [— 7 r/ 2 , 7 r/ 2 ]. We 
use the truncated Laplacian distribution to model the channel 
power angle spectrum as [18] 

1 -\/ 2 || 0 - 0 || 

p(9) ~ ^ . e , (56) 

%/2cr (l — 


where cr and 9 denote the angular spread (AS) and the mean 
AoA of the channel, respectively. We assume that the ASs cr 
in (56) for the channels of all users and the eavesdropper are 
identical and we set cr = 7 r/ 2 . The channel covariance matrices 
of all users and the eavesdropper are generated based on [18, 
Eq. (3.14)]. For the channel between the user and the BS in its 
own cell and the channel between the user and the BSs in the 
other cells, we impose a channel power normalization to make 
the trace of the channel covariance matrices equal to Nt and 
pNt, respectively, and set p = 0.1. The asymptotic secrecy 
rate is computed from Proposition 1 and the exact secrecy 
rate is obtained by Monte Carlo simulation. We set L = 3, 
K = b, Pik = I, k = 1,2,-■■ ,K, I =_0,1, • • • , L, T = 10, 
and Nq = 1. The mean channel AoAs 9 of all users and the 
eavesdropper in (56) are generated at random and the channel 
AoAs 9 of all users and the eavesdropper are distributed within 
the angle interval [—tt, tt] based on (56). 

Figure 1 shows the secrecy rate performance vs. the SNR 7 
for matched filter precoding and AN generation and different 
p. We observe from Figure 1 that the asymptotic secrecy rate in 
Proposition 1 provides a good estimate for the exact secrecy 
rate. Also, we observe from Figure 1 that in the low SNR 
regime, allocating more power (larger p) to the transmit signal 
leads to a higher secrecy rate. However, as the SNR increases, 
the secrecy rate may be small if the transmit signal power is 
high, i.e., if the AN power is small. For example, for SNR = 2 
dB, we find from Corollary 2 that p < 0.15 is a necessary 
condition to guarantee reliable communication. Thus, for p = 
0.18, a positive secrecy rate cannot be achieved, as confirmed 
by Figure 1. 

Figure 2 shows the exact secrecy rate performance vs. the 
SNR for different Pe and different designs. For matched 
filter precoding with AN generation, we obtain the optimal 
power allocation p and q based on Corollary 1. For naive 
matched filter precoding, we set p = 1 /K and do not generate 
AN. From Figure 2 we make the following observations: 
1) Because of the pilot contamination attack, even if the 
transmitter is equipped with a large number of antennas, naive 






Fig. 1: Secrecy rate vs. the SNR for different p 



Fig. 2: Exact secrecy rate vs. the SNR for different Pe and 
different precoding designs. 


matched filter precoding can not achieve a positive secrecy 
rate for moderate-to-high SNR. 2) For Pe = 1, matched filter 
precoding with AN generation performs better in the low-to- 
moderate SNR regime and the null space design performs 
better in the moderate-to-high SNR regime, see Remark 3. 
3) When the eavesdropper increases the power of the pilot 
contamination attack, this results in a serious secrecy rate 
loss for matched filter precoding with AN generation, but has 
barely any visible impact on the null space design. This is 
because the null space design can eliminate the impact of pilot 
contamination caused by the active eavesdropper as suggest by 
(53) and significantly degrade the achievable rate of the active 
eavesdropper. 

VI. Conclusions 

In this paper, we have studied the transmission design for 
multi-cell multi-user massive MIMO systems in the presence 
of an active eavesdropper. Assuming matched filter precoding 
and AN generation, we obtained an asymptotic achievable 
secrecy rate expression for the case of a pilot contamination 
attack when the number of transmit antennas tends to infinity. 
We obtained a closed-form expression for the optimal power 
allocation policy for the transmit signal and the AN. Moreover, 
we proved that the impact of the active eavesdropper is com¬ 
pletely eliminated when the transmit correlation matrices of 
the users and the eavesdropper are orthogonal. This motivates 
the development of a null space design that exploits the low 
rank property of the transmit correlation matrices of massive 


MIMO channels. Monte Carlo simulation results showed that 
the derived analytical results are accurate and confirmed 
the effectiveness of the proposed transmission schemes for 
combating the pilot contamination attack. 


Appendix A 

Proof of Proposition 1 

First, we calculate SINRom, in (16). For the numerator of 
(16), based on [17, Corollary 1], we have 
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For the denominator of (16), we have 
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Also, performing some simplifications, we have 
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For m ^ k, hL is independent of . Hence, the asymp- 
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the numerator of (61). 

For m = k, based on (2), we have 
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respectively. 

Substituting (73)-(78) into (19), we obtain (23), which 
completes the proof. 


Also, for m ^ k, hL is independent of hk, and we obtain 
in (17) 
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For m = k, similar to (65), we have 
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Following a similar approach as was used to obtain (61) 
and (65), we obtain 
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By substituting (57)-(72) into (16), we obtain the expression 
for SINRom,asy h (22). Next, we simplify SINReve in (19). 
First, we consider 
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